Virus Name: Toxic
V Status: Viron
Discovery: March, 1993
Symptoms: .COM file corruption; programs fail to function properly
Eff Length: 171 Bytes Overwriting
Type Code: ONCK - Overwriting Non-Resident .COM Infector
Detection Method: F-Prot, Sweep, AVTK, ViruScan, IBMAV, NAV, NAVDX,
VAlert, PCScan, ChAV,
Sweep/N, Innoc, AVTK/N, NProt, IBMAV/N, NShld, NAV/N,
Removal Instructions: Delete infected files
The Toxic virus was submitted in March, 1993, and is originally
from England. Toxic is a non-resident, direct action overwriting
virus which infect .COM programs, including COMMAND.COM. Infected
programs are permanently corrupted, and will not function properly.
When a program infected with the Toxic virus is executed, the Toxic
virus will infect one .COM program located in the current directory.
Infected programs will have the first 171 bytes of the host
program overwritten with the Toxic viral code. The file's date and
time in the DOS disk directory listing will not be altered. The
following text string can be found within the viral code in all
Toxic infected programs:
"*.COM [Toxic] By Toxic Crusader -=ARCV=-"